question on attribute resolver filter

[Leonard Kroll]

Thank you.
That fixed the problem.
What attributes are available for requestContext?
I searched but did not find any doc on it.

~lennyK

Leonard Kroll
UNIX / GIS Administrator
Univ. Massachusetts Boston
Leonard(dot)Kroll(at)umb.edu
Phone: 617-287-5048
fax:      617-287-5224

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Chad La Joie
Sent: Friday, October 14, 2011 12:59 PM
To: Shib Users
Subject: Re: question on attribute resolver filter

sAMAcountName is not an attribute available on the request context.
You might try requestContext.princiaplName assume the userid provided
at login time is what you want to use in the filter.

On Fri, Oct 14, 2011 at 12:48, Leonard Kroll <Leonard.Kroll at umb.edu> wrote:
> Hi, I am binding to the AD LDAP, but getting an event 1535, problem 2001, no
> object found.
>
> It seems this is caused by an invalid filter in the request.
>
> Can someone point out what I am doing wrong in the filter?
>
>
>
> The user is identified by sAMAccountName and authenticates using it.
>
>
>
> All help is greatly appreciated
>
> ~lennyK
>
>
>
>
>
> <resolver:AttributeDefinition xsi:type="ad:Simple" id="sAMAccountName"
> sourceAttributeID="sAMAccountName"
> xmlns="urn:mace:shibboleth:2.0:resolver:ad">
>
> <resolver:Dependency ref="myLDAP" />
>
> <resolver:AttributeEncoder xsi:type="enc:SAML1String"
> name="urn:mace:dir:attribute-def:sAMAccountName" />
>
> <resolver:AttributeEncoder xsi:type="enc:SAML2String"
> name="urn:oid:1.2.840.113556.1.4.221" friendlyName="sAMAccountName" />
>
> </resolver:AttributeDefinition>
>
>
>
>
>
>     <resolver:DataConnector id="myLDAP" xsi:type="LDAPDirectory"
> xmlns="urn:mace:shibboleth:2.0:resolver:dc"
>
>         ldapURL="ldap://xxx.xxx.xxx.xxx"
>
>         baseDN="ou=staff,dc=umassb,dc=net"
>
>         principal="aaaaa.bbbbb at umassb.net"
>
>         principalCredential="xxxxxxxxxx"
>
>         lowercaseAttributeNames="true"
>
>         noResultIsError="true"
>
>         searchScope="SUBTREE">
>
>
>
>         <dc:FilterTemplate>
>
>             <![CDATA[
>
>                 (sAMAccountName=($requestContext.sAMAccountName))
>
>            ]]>
>
>         </dc:FilterTemplate>
>
>         <LDAPProperty name="java.naming.referral" value="follow"/>
>
>     </resolver:DataConnector>
>
>
>
>
>
> Leonard Kroll
> UNIX / GIS Administrator
> Univ. Massachusetts Boston
> Leonard(dot)Kroll(at)umb.edu
> Phone: 617-287-5048
> fax:      617-287-5224
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net